Elastic Docs
/
Solutions and use cases
/
Security solution
/
AlertZero
/
Use AlertZero
Decide a detection change
Approve a change to a detection rule, or a new rule.